Global permissions in Project Server 2013

Summary: Project Server 2013 users are allowed access to features and functionality through global permissions.

Important:

The Project Server 2013 environment must be in Project Permission Mode in order for you to view global permissions and other security settings. For more information about Project Permission Mode, see Plan user access in Project Server 2013.

The following is a list of global permissions for Project Server 2013. The columns in the table include the following:

Description Describes what the permission enables you to do.

Dependencies Lists any other permissions (global or category) or requirements necessary for the permission to function.

New for Project Server 2013 Displays an × symbol if the permission is new for Project Server 2013.

Allows a user to access the OData web service for retrieving data from Project Server.

×

Build Team On New Project

Allows a user to add resources to a project that has not been saved to Project Server. Grant this permission to project managers who want to use the Build Team feature in Project Professional to staff their projects before they save (and publish) them to Project Server.

User has to be granted the Assign Resources and View Enterprise Resource Data category permissions in order to see resources that are part of the Enterprise Resource Pool in the Build Team feature in Project Professional.

Allows a user to access the Delete Enterprise Objects page available through the Server Settings page in Project Web App. Grant this permission to users who have to delete timesheets, status reports responses, projects, resources, users, and user delegates from Project Server.

Allows a user to access the Request a status report link on the Project Web App Status Reports center and to view team reports. Grant this permission to any member of your organization who has to create status report requests and view team reports, usually project managers, resource managers, team leads, and members of your organization’s PMO.

Log on

Allows a user to connect to Project Server from Project Professional or to log on to Project Web App. Grant this permission to any user who is authorized to connect to Project Server from Project Professional or log on to Project Web App.

Log on to Project Server from Project Professional

Allows a user to load the Enterprise Global Template when he or she connects Project Professional to Project Server. Grant this permission to all users in your organization who will be using Project Professional to connect to Project Server.

Manage Active Directory Settings

Allows users to modify any Active Directory Synchronization settings within the Project Web App Project Server Settings. If the user is denied this permission then they cannot modify settings for any of the following:

Enterprise Resource Pool synchronization settings.

Project Web App Security Groups synchronization settings.

Choose an Active Directory Group to synchronize against a specific Security Group within the Add or Edit Group page.

Allows a user to create, modify, and delete lists within the Project Web App project site. This permission is used when you synchronize a user against the Project Web App project site.

Manage Notification and Reminders

Allows a user to manage the Notification and Reminders settings.

Manage My Delegates

Allows users to see the "Manage Delegates" link and to set a delegate on the "Add/Modify Delegation" page.

Manage My Resource Delegates

Allows users to set a user who requires a substitute on the Add/Modify Delegation page.

Manage Personal Notifications

Allows a user to access the Manage My Alerts and Reminders page in Project Web App. Grant this permission to any user that you want to be able to sign up for e-mail notifications and reminders related to tasks and status reports.

Allows a user to access the Manage Views page in the Server Settings page in Project Web App. Users with permission to access this page are able to add, modify, or delete Project, Project Center, Resource Center, Assignment, or Portfolio Analyzer views, and they are able to modify Timesheet views. Grant this permission to project managers, resource managers, and members of your organization's PMO so that they can create project data views for users to access in Project Web App and Project Professional. It is important to remember that if your organization is allowing project managers to create custom fields at the project level, then each project may require its own unique view. The number of projects in this kind of environment may be too many for the IT administrator team. Offloading this work to the people in your organization that work at the project level on a day-to-day basis is one way to distribute the workload of managing views.

Manage Queue

Allows the user to read or set queue configuration settings and retry, cancel, and unblock jobs in the queue.

Manage Resource Notifications

Allows a user to access the "Alert me about my resources on tasks and status reports" link on the Project Web App home page. Grant this permission to any resource manager or project manager that you want to be able to sign up for email notifications and reminders related to their resources' tasks and status reports.

Manage Rules

Allows a user to access the Rules page from the Approval Center in Project Web App and set rules on how update transactions will be automatically processed. Grant this permission to project managers, resource managers, or members of your organization's PMO so that they can define how they will automatically receive and accept changes to transactions by their resources.

Manage security

Allows a user to access the Manage security page in Project Web App to define security categories, security templates, and user authentication settings. Grant this permission to Project Server administrators or a very small and closely managed group of people. This page lets users change Project Server security settings, and create security categories and security templates. Changes to settings on this page, after you have begun using Project Server in your organization, should be carefully managed and (ideally) infrequent.

Manage Server Events

Allows a user to register event handlers for specific Project Server server-side events. The Manager Server Events page requires the event handler to be registered by the server as defined in the Project Server SDK.

Manage Server Configuration

Allows a user to access the Project Web App Permissions page in Project Web App. Users with permission to access the Project Web App Permissions page can enable or disable enterprise features, manage organizational permissions, and create custom menus (both top-level and side-pane) in Project Web App. Grant this permission to Project Server administrators or a very small and closely managed group of people.

Manage SharePoint Foundation

Allows a user to create and delete project sites, configure automatic project site creation for newly published projects, configure permission synchronization settings, and update site path. Grant this permission to members of your organization who are administrators for Project Web App or administrators for the servers that are running SharePoint Server 2013.

Users with this permission should be granted administrative privileges to all of the servers that are running Project Server 2013 and SharePoint Server 2013

Manage Time Reporting and Financial Periods

Allows a user to create and modify Timesheet and Fiscal period definitions.

Manage Time Tracking

Allows a user to be forwarded timesheets for review. After reviewing the timesheet, the user must be granted the following permissions to accept and approve the timesheet:

Accept Timesheet

Approve Timesheet

Manage Users and Groups

Allows a user to access the Manage Users and Groups page in the Server Settings page in Project Web App. Users with this permission will be able to add, modify, or delete Project Server users and manage Project Server security groups. Grant this permission to members of your organization who are Project Server administrators. Only a small group of people should have permission to access this set of pages.

Manage Workflow and Project Detail Pages

Allows a user to manage and view workflow and Project Detail Pages (PDPs).

New Project

Allows a user to add a new project to Project Server using Project Professional, Project Web App, or the Project Server Interface (PSI). New functionality in Project Server 2013 for this permission: If you do not also have the Open Project permission, after you create a project, you are taken back to the Project Center.

New Resource

Allows a project manager to add new resources to the Enterprise Resource Pool using Project Professional, the Project Web App Resource Center, or the Project Server Interface (PSI). Grant this permission to any member of your organization who has to create new enterprise resources in Project Server.

Note:

If your organization is using the Active Directory synchronization feature, you may want to consider denying this permission to all non-IT administrators in your organization.

New Task Assignment

Allows users to access the Create a New Task and Add Yourself to a Task links from the Insert Row button found on the Tasks page of Project Web App. Grant this permission to any member of your organization who has to create new assignments on existing tasks in projects that have been published to Project Server. Users with this permission will also be able to use the Create a New Task link to create new tasks in Project Web App for any project to which the user has access. The list of available projects for a user to create new tasks is determined by the Create New Tasks or Assignment category permission. A user who has the New Task Assignment permission must also have access to the projects to which they want to assign themselves to a task.

Open Project Template

Allows a user to open an Enterprise Project Template from Project Server by using Project Professional. Grant this permission to all users in your organization who will use Project Professional to create and manage projects that are based on Enterprise Project Templates.

User must be granted the New Project global permission in order to save the project to the Project Server database as an actual project.

Reassign Task

Allows a user to delegate an assigned task to another (existing) user. Grant this permission to members of your organization who need the ability to delegate task assignments to other resources. For example, a large project may be run by a single project manager, but actually implemented by several teams, each with its own team lead. A project manager could assign the team leads in the project plan, and then the team leads could in turn delegate each task to individual members of the teams. This example creates an additional layer of task management within the larger organization, but it can also simplify resource allocation within projects themselves and make it easier for a project manager to manage large projects. Or, if you have a resource that is about to leave on a three-week vacation, and this resource had this permission, that person would be able to assign his or her tasks directly to other resources instead of having the project manager check out the project and reassign resources.

Save Enterprise Global

Allows a user to check out, modify, and save the Enterprise Global Template to the Project Server database from Project Professional. This permission should only be granted to a small group of people in your organization; either project managers, members of your organization’s PMO, or Project Server administrators.

Save Project Template

Allows a user to create and save a project as an Enterprise Project Template from Project Professional to the Project Server database. Grant this permission to members of your organization who are tasked with creating Enterprise Project Templates. When a user saves a project to Project Server for the first time, the option to select Template (as opposed to Project) from the Type drop-down list in the Save to Project Server dialog box is enabled.

User needs to be granted the Assign Resources and View Enterprise Resource Data category permissions in addition to this permission if they are also responsible for adding Generic resources to the Enterprise Project Template.

Save Unprotected Baseline

Allows a user to save a non-protected baseline or clear a non-protected baseline associated with an enterprise project published to the Project Server database. Baselines are saved by using the Set Baseline functionality accessed from the Project Professional ribbon on the Project tab in the Schedule group. Click the Set Baseline button and then select Save Baseline or Clear Baseline. Unprotected Baselines are in the range of Baseline 6–10 inclusive.

User needs to be granted the Save Project category permission.

Self-Assign Team Tasks

Resources can be members of a Team Assignment Pool. With this permission, it is possible for users to assign tasks, which have been assigned to their Team Assignment Pool, to themselves through the Team Tasks page in Project Web App.

Status Broker Permission

Allows API updates to occur for a user from places like Exchange Server.

View Approvals

Allows a user to view the Approval Center.

Users have access to the Approval Center if they have either the Accept Timesheets or the View Approvals permission.

View Business Intelligence Link

Allows a user to see the Business Intelligence link in Quick Launch. However, it has no effect on Report Center Security.

View OLAP Data

Allows a user to read from the output for the OLAP cube. This permission is only checked when the OLAP cube is built.

Allows users to access the Resource Center from Project Web App or Project Professional and view resource allocation data. Grant this permission to users who need to view the Resource Center in Project Web App by clicking the Resources link in the top-level navigation, or in Project Professional by selecting Resource Center on the Collaborate menu.

Allows a user to access the Resource Plan page within Project Web App.

View Resource Timesheet

Allows users to view the timesheets, regardless of their state or ownership, for resources identified in the category selection criteria.

Users must be granted the Accept Timesheet global permission to use this permission.

View Task Center

This permission when denied prevents users from seeing the Task Center link on the Project Web App Quick Launch menu

Note:

This permission does not lock down access to the Task Center page. It is still possible for users to navigate to this page.

View Team Builder

Allows a user to use Build Team in Project Web App and Project Professional, as well as determine the list of available resources. Grant this permission to resource managers to allow them to use Build Team in Project Web App to add resources to projects that have been saved to the Project Server database. Project Managers can also use this permission to allow them to use Build Team in Project Professional to add resources to projects.

User needs to be granted the Assign Resources category permission in addition to the View Team Builder global permission. The Assign Resources category permission determines the list of resources available in Build Team in both Project Professional and Project Web App.

User needs to be granted the Build Team on Project category permission. The Build Team on Project permission determines with which projects Build Team can be used. This applies to using Build Team in both Project Professional and Project Web App.

View Timesheets

When this permission is denied, it prevents users from seeing the Timesheet Center link on the Project Web App Quick Launch menu.

Note:

This permission does not lock down access to the Timesheet page. It is still possible for users to navigate to this page.